This month, we are releasing fixes for security vulnerabilities that impact TFS 2015, TFS 2017, TFS 2018, and Azure DevOps Server 2019.
CVE-2019-1305: cross site scripting (XSS) vulnerability in Repos
CVE-2019-1306: remote code execution vulnerability in Wiki
Here are the versions impacted:
Azure DevOps Server 2019 Update 1 Patch 1
If you have Azure DevOps Server 2019 Update 1,
Today, we are announcing the availability of Azure DevOps Server 2019 Update 1. Azure DevOps Server brings the Azure DevOps experience to self-hosted environments. Customers with strict requirements for compliance can run Azure DevOps Server on-premises and have full control over the underlying infrastructure.
For the August release, we are releasing patches for Azure DevOps Server 2019.0.1, TFS 2018 Update 3.2, and TFS 2017 Update 3.1. This month, there are no security fixes; these patches include functional changes.
Azure DevOps Server 2019.0.1: We added information to service connections to clarify that they are authorized for all pipelines by default.
Today, we are announcing the release of Azure DevOps Server 2019 Update 1 RC2. This is our last planned prerelease before our final release of Azure DevOps Server 2019 Update 1. This second release candidate includes some bug fixes since RC1.
For the July security release, we are releasing fixes for vulnerabilities that impact Azure DevOps Server 2019, TFS 2018, TFS 2017, TFS 2015, TFS 2013, TFS 2012, and TFS 2010. Thanks to everyone who has been participating in our Azure DevOps Bounty Program.
Today, we are announcing the release of Azure DevOps Server 2019 Update 1 RC1. Azure DevOps Server, formerly known as Team Foundation Server or TFS, is a self-hosted package that customers can run in their own environment, on-premises, or inside VMs on the cloud and includes all of the Azure DevOps services: Pipelines,
Today, we are releasing Azure DevOps Server 2019.0.1 RTW. Azure DevOps Server (formerly Team Foundation Server) brings the Azure DevOps experience to self-hosted environments. Customers with strict requirements for compliance can run Azure DevOps Server on-premises and have full control over the underlying infrastructure.
For the May security release, we are releasing fixes for vulnerabilities that impact Azure DevOps Server 2019, TFS 2018, TFS 2017, and TFS 2015. Thanks to everyone who has been participating in our Azure DevOps Bounty Program.
We have now added the ability to patch TFS 2015,
Today, we are releasing Azure DevOps Server 2019.0.1 RC. This is a go-live release, meaning it is supported on production instances, and you will be able to upgrade to our final release.
Azure DevOps Server 2019.0.1 includes bug fixes for Azure DevOps Server 2019.
For the April security release, we are releasing fixes for vulnerabilities that impact Azure DevOps Server 2019, TFS 2018, TFS 2017, and TFS 2015. These vulnerabilities were found through our Azure DevOps Bounty Program. Thanks to everyone who has been participating in this program.
